CVE-2024-11422 — DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

CVE-2024-11422

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software PUBLISHED

Description (CNA)

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Autodesk / Navisworks Freedom	affected 2025 before 2025.4
Autodesk / Navisworks Simulate	affected 2025 before 2025.4
Autodesk / Navisworks Manage	affected 2025 before 2025.4

CWE

CWE-787

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.